Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
File: ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa (raw, json)
Hash identifier: J7ThkTLl3E4VYHAW3DkF7tInOc0qO4wdxgl0/AImA3A=
Subject key identifier: 21:A6:1F:22:CC:6B:8E:7D:96:BB:51:BB:39:10:45:58:DB:0B:8F:58
Certificate issuer: /CN=8335f7cc-1a69-4b40-8900-117660939363
Certificate serial: 010D0C9F432858489FD0960E271E2CD80E5D5980
Authority key identifier: 0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 395865
IP address blocks: 64.93.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:96:0e:27:1e:2c:d8:0e:5d:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335f7cc-1a69-4b40-8900-117660939363
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=c00407d8-f5b1-4a72-82b6-f252fe1c4301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:a7:2c:7d:0b:38:d2:a5:32:ea:1c:61:85:
cc:8f:a2:38:d8:60:83:3b:22:a3:b3:aa:02:61:e0:
5a:16:0e:3a:9a:94:91:45:67:1b:06:d6:7b:c1:65:
5d:39:5a:4d:99:d1:cf:17:ee:95:5c:61:58:11:1c:
18:7b:8c:de:14:91:5f:b5:d1:37:5b:a5:38:fa:70:
d8:3f:7c:4b:5b:52:8c:ce:2f:a9:40:62:03:6d:0c:
c1:a3:4d:a1:79:02:3e:9e:03:1d:fa:24:b5:ad:cc:
40:b1:f6:aa:b9:22:f7:50:ba:d6:9e:db:8e:51:ab:
72:e4:da:ea:1f:68:6e:55:97:94:b8:99:1b:65:c6:
c3:55:69:89:a6:72:9a:a7:c5:f9:12:4e:7a:05:3f:
89:a7:dc:55:86:26:b9:e8:cf:57:e3:6c:ff:ed:ea:
ba:eb:e3:3e:5a:20:65:75:60:b8:e1:79:8e:11:80:
4d:8d:98:64:2c:f1:c9:e7:7a:de:32:f5:64:5b:cf:
a2:b6:d4:de:b5:fc:ef:08:50:2d:6e:30:eb:db:29:
d0:ec:ab:91:9b:9b:71:80:61:e9:b4:ca:96:b3:78:
54:1f:5e:20:9b:77:3a:90:78:c8:c3:50:2e:57:dd:
be:4c:02:96:0f:3f:2d:d9:6f:b0:73:ca:d7:a8:6c:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:1F:22:CC:6B:8E:7D:96:BB:51:BB:39:10:45:58:DB:0B:8F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ef57e5e0-97ea-3682-9e9e-816b74e9a69f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.crl
X509v3 Authority Key Identifier:
keyid:0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer
sbgp-ipAddrBlock: critical
IPv4:
64.93.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:76:04:31:22:52:6e:66:13:74:5c:b2:8c:57:53:ec:40:a1:
e6:0a:28:b3:40:c9:70:f8:14:01:fa:f7:41:cf:03:8c:f4:4d:
d1:a1:b7:06:7b:8c:1b:4c:20:ae:4a:f7:52:63:1f:27:f0:5e:
52:9c:9d:4b:f3:43:44:eb:1b:a5:e5:a0:e2:22:c3:a4:9d:a2:
f7:7c:b7:c4:82:f6:18:8e:2d:75:f6:5d:af:76:3a:44:81:c8:
3e:3d:18:6a:c3:25:e5:79:38:e9:32:bd:c9:cd:3c:2a:f1:9e:
3c:5a:2a:48:23:23:86:15:01:02:8d:a0:cc:c2:82:9a:cf:0f:
38:ce:81:37:88:fe:f1:68:72:f0:d6:b8:94:83:5a:c9:bd:5a:
b8:f0:c3:6c:70:51:6a:e4:12:4a:4b:47:66:28:50:8d:3c:1b:
5b:3d:b0:7c:2f:47:69:81:84:f5:01:f4:32:07:79:e3:e3:ae:
02:ee:6c:bd:4d:98:82:74:ac:60:d4:fa:fc:55:c5:9e:9c:98:
5c:d2:3d:c0:6a:af:ca:5a:a2:c1:bb:05:b5:4d:1e:11:60:1d:
e1:4a:08:69:d1:be:bd:42:21:27:90:f7:e6:ae:e3:7d:1c:11:
f2:f2:cd:c6:16:0c:8c:5a:2c:5c:c6:0a:49:d8:73:80:be:b1:
20:a5:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:17 2025 by rpki-client